A «no-deal» Brexit has been on most EU organisations’ agenda for some time now. The wide ranging legal implications of such a scenario include, for EU organisations which transfer personal data to third parties (e.g. group entities or suppliers) located in the UK, assessing whether additional compliance steps must be taken to ensure that such transfers are made pursuant to the General Data Protection Regulation (679/2016/UE) (the «GDPR»). As the end of the transition period is less than two months away and as negotiations for a future partnership are still ongoing, Luxembourg organisations should be ready to adopt the right data protection measures if and when the UK leaves the EU without a deal.
Up until now, organisations based in Luxembourg and in the UK could count...
|